Method for monitoring a status in form of presence and/or absence of a network entity

ABSTRACT

A method for monitoring a status in a form of presence and/or absence of a subscribed network entity in a network by a presence service, wherein the network is a software defined network having one or more forwarding elements being configurable for recognizing and applying one or more actions on packets being forwarded by the forwarding elements and one or more network entities, includes monitoring the status of the subscribed network entity. The monitoring the status of the subscribed network entity includes providing the presence service with a status update of the selected network entity only when at least one of the one or more forwarding elements, to which the selected network entity is directly connected, has detected a change in the presence status of the subscribed network entity; and dropping packets of the subscribed network entity destined for the presence service.

CROSS REFERENCE TO RELATED APPLICATIONS

This application is a U.S. National Stage Application under 35 U.S.C.§371 of International Application No. PCT/EP2014/063525 filed on Jun.26, 2014. The International Application was published in English on Dec.30, 2015 as WO 2015/197120 A1 under PCT Article 21(2).

FIELD

The present invention relates to a method for monitoring a status inform of presence and/or absence of a network entity in a network by apresence service, preferably wherein the network is a software definednetwork, comprising one or more forwarding elements being configurablefor recognizing of and applying one or more actions on packets beingforwarded by said forwarding elements and one or more network entitieswherein said network entities are connectable to one or more of theforwarding elements, preferably wherein each of the network entities isconnected to one or more forwarding elements directly.

The present invention further relates to a presence service entity forproviding a presence service for monitoring a status in form of presenceand/or absence of a network entity in a network, preferably wherein thenetwork is a software defined network, comprising one or more forwardingelements being configurable for recognizing of and applying one or moreactions on packets being forwarded by said forwarding elements and oneor more network entities wherein said network entities are connectableto one or more of the forwarding elements, preferably wherein each ofthe network entities is connected to one or more forwarding elementsdirectly.

The present invention even further relates to a network, preferably asoftware-defined network with a presence service for monitoring a statusin form of presence and/or absence of a network entity in a network,preferably wherein the network is a software defined network, comprisingone or more forwarding elements being configurable for recognizing ofand applying one or more actions on packets being forwarded by saidforwarding elements and one or more network entities wherein saidnetwork entities are connectable to one or more of the forwardingelements, preferably wherein each of the network entities is connectedto one or more forwarding elements directly.

BACKGROUND

Typical examples for network applications using a presence service arechat and messaging applications monitoring the presence status of theirusers. Other more advanced examples include systems integratingreliability mechanisms. For instance fault tolerant systems may includetwo servers, one working to serve users' requests, while the otherserver is idle, in order to substitute the first server upon failing. Apresence service in this case would provide a notification in case thefirst server stops working, i.e. when it is not present anymore, so thatthe second idle server can immediately substitute the first server.Other examples include mobile IP and IPSec presence services (availableunder http://www.pasieronen.com/publications/NRCTR2008002.pdf).

In the non-patent literature of XMPP according to RFC 3921 (which isavailable under http://www.rfc-editor.org/rfc/pdfrfc/rfc6121.txt.pdf) anexample of a protocol is shown supporting a presence service.Conventional presence services, for example in a computer network areprovided such that an entity which is monitored by the presence servicesends periodic messages to the presence service. The periodic messagesare usually called keepalive messages or heartbeat messages. Thepresence service monitors that a keepalive message is received in eachpredetermined time period. The absence of a keepalive message thenindicates that the monitored entity is not present anymore, for examplewas shut down or is offline from the network.

The keepalive message sending period and the number of missing keepalivemessages after which the monitored entity is considered as “absent” areconfiguration parameters of the presence service which are, for example,shown in further non-patent literature (specifically that availableunder http://www.cs.bham.ac.uk/˜pxt/PAPERS/stillAliveFinal.pdf).

A conventional implementation of a presence service is to use a presenceserver. The presence server accepts monitoring requests for registeringone or more entities to the presence service to activate thecorresponding presence monitoring of the registered entities. At thesame time the registered entities start sending periodic keepalivemessages to the presence service. When a registered entity goes offline,i.e., when the keepalive messages stop reaching the presence servicethen the presence service changes the status of the registered entity to“absent” and usually the change of the status of a registered entity isnotified to an application for performing an action to this information.

The keepalive or heartbeat messages are usually very small messages interms of bytes which are sent for the sole purpose of “refreshing” thepresence status in the presence service. However keepalive messages needto travel from each monitored entity to the presence service and thisincreases the number of small packets the network has to deliver.

On the other hand the presence service has to collect all thesekeepalive messages and update the state of the corresponding monitoredentity according to the received keepalive packets. Usually also timersare involved that need to be reset at the reception of a correspondingkeepalive packet. The presence service hence, needs to scale with thenumber of keepalive messages that are sent. This is related to the totalnumber of users of the presence service and the keepalive periods.

Further, different applications are required to implement their ownpresence services because operations of these applications require sucha service. However, this causes to deploy plurality of presence servicesor in other words high costs for an operator of the network.

SUMMARY

In an embodiment, the present invention provide a method for monitoringa status in a form of presence and/or absence of a subscribed networkentity in a network by a presence service, wherein the network is asoftware defined network comprising one or more forwarding elementsbeing configurable for recognizing and applying one or more actions onpackets being forwarded by the forwarding elements and one or morenetwork entities, wherein the one or more network entities areconnectable to one or more of the forwarding elements. The methodincludes monitoring the status of the subscribed network entity when thesubscribed network entity is discovered by the presence service, whereinthe monitoring the status of the subscribed network entity comprisesproviding the presence service with a status update of the subscribednetwork entity only when at least one of the one or more forwardingelements, to which the subscribed network entity is directly connected,has detected a change in the presence status of the subscribed networkentity; and dropping packets of the subscribed network entity destinedfor the presence service.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention will be described in even greater detail belowbased on the exemplary figures. The invention is not limited to theexemplary embodiments. All features described and/or illustrated hereincan be used alone or combined in different combinations in embodimentsof the invention. The features and advantages of various embodiments ofthe present invention will become apparent by reading the followingdetailed description with reference to the attached drawings whichillustrate the following:

FIG. 1 shows schematically a conventional software defined network;

FIG. 2 shows multiple possibilities for deploying a presence service inform of a presence manager in a software defined network according to anembodiment of the invention;

FIG. 3 shows part of a system according to an embodiment of the presentinvention;

FIG. 4 shows steps of a method according to an embodiment of the presentinvention;

FIG. 5 shows part of steps of a method according to an embodiment of thepresent invention;

FIG. 6 shows part of steps of a method according to an embodiment of thepresent invention;

FIG. 7 shows a system according to an embodiment of the presentinvention;

FIG. 8 shows presence service internal state and keepalive packetsgenerated according to an embodiment of the present invention;

FIG. 9 shows a system according to an embodiment of the presentinvention; and

FIG. 10 shows presence service internal state tables and keepalivepackets generated according to a method according to an embodiment ofthe present invention.

DETAILED DESCRIPTION

As described herein, the present invention provides a method formonitoring a status in form of presence and/or absence of a networkentity in a network by a presence service and a network which enable amore efficient network usage, in particular network-wide resource usage.

As further described herein, the present invention provides a method formonitoring a status in form of presence and/or absence of a networkentity in a network by a presence service and a network which exploitcheap resources of network entities enabling a high number of entitiesfor which a presence service can be provided.

As additionally described herein, the present invention provides amethod for monitoring a status in form of presence and/or absence of anetwork entity in a network by a presence service and a network enablingscaling with a number of status changes instead of scaling with a numberof keepalive messages sent.

As also described herein, the present invention provides a method formonitoring a system in form of presence and/or absence of a networkentity in a network by a presence service and a network enablingenhanced flexibility and an easy implementation in existing networks.

In an embodiment, the present invention provides a method for monitoringa status in form of a presence and/or absence of a network entity in anetwork by a presence service is defined, preferably wherein the networkis a software defined network, comprising one or more forwardingelements being configurable for recognizing of and applying one or moreactions on packets being forwarded by said forwarding elements and oneor more network entities wherein said network entities are connectableto one or more of the forwarding elements, preferably wherein each ofthe network entities is connected to one or more forwarding elementsdirectly.

According to an embodiment, a method is characterized in that when anetwork entity subscribed to and discovered by the presence service, thestatus of said network entity is monitored such that a) the presenceservice is only provided with a status update of said connected networkentity when at least one of said one or more forwarding elements, towhich said network entity is directly connected, has detected a changein the presence status of the subscribed network entity and that b)packets of said network entity destined for the presence service aredropped.

In an embodiment, the present invention provides a presence serviceentity for providing a presence service for monitoring a status in formof presence and/or absence of a network entity in a network is defined,preferably wherein the network is a software defined network, comprisingone or more forwarding elements being configurable for recognizing ofand applying one or more actions on packets being forwarded by saidforwarding elements and one or more network entities wherein saidnetwork entities are connectable to one or more of the forwardingelements, preferably wherein each of the network entities is connectedto one or more forwarding elements directly.

According to an embodiment, a presence service entity is characterizedin that when a network entity subscribed to and discovered by thepresence service, the status of said network entity is monitored suchthat a) the presence service is only provided with a status update ofsaid connected network entity when at least one of said one or moreforwarding elements, to which said network entity is directly connected,has detected a change in the presence status of the subscribed networkentity and that b) packets of said network entity destined for thepresence service are dropped.

In an embodiment, a network is provided, preferably a software-definednetwork with a presence service for monitoring a status in form ofpresence and/or absence of a network entity in a network, preferablywherein the network is a software defined network, comprising one ormore forwarding elements being configurable for recognizing and applyingone or more actions on packets being forwarded by said forwardingelements and one or more network entities wherein said network entitiesare connectable to one or more of the forwarding elements, preferablywherein each of the network entities is connected to one or moreforwarding elements directly.

In an embodiment, the presence service is only provided with a statusupdate of said connected network entity when all forwarding elements, towhich said network entity is directly connected, have detected a changein the presence status of the subscribed network entity. For example apresence status change may be detected at different times by differentforwarding elements, then an identification and coordination either bythe network entity and/or by the involved forwarding elements may beperformed. After a predetermined number, preferably all of the involved,i.e. all forwarding elements to which the network entity is directlyconnected, have detected the presence status change, the presenceservice is provided with a corresponding status update.

As described herein, when a status update of a subscribed entity isnecessary only this status update information is provided to thepresence service: When the forwarding element has detected a change inthe presence status of the subscribed network entity, then only thisinformation is provided to the presence server but not the keepalivepackets itself enabling in particular to use keepalive packets only atthe very edge of the network and thus the network-wide resources usageis optimized.

As described herein, in general a conventional poll system issubstituted with a push one, where only status changes are notified, incontrast to conventional methods and networks in which statusinformation needs to be periodically refreshed.

As described herein, inexpensive resources at forwarding elements ornetwork switches are exploited to maintain a distributed state for ahigh number of potential entities using a presence service compared toconventional systems which would require a consistent number ofdedicated resources, for example several servers at a datacenter.

As described herein, the present invention scales with the number ofstatus changes instead of scaling with the number of keepalive messagessent. Thus the amount of data to be exchanged in the network is reduced.

As described herein, offloading to the network of a service is enabledthat otherwise would be provided by applications at the edge of thenetwork. Thus, the network can then consolidate the service for severalcustomers.

As described herein, application development is easier since thepresence service can be outsourced, for example to the manufactures ofthe forwarding elements or switches respectively.

In general, the terms “network”, “network entity”, “switch”, “port”,“forwarding element”, etc. as used herein are not limited in any way toa physical instantiation of the corresponding term. In particular anyentity may also be a virtual instantiation, for example a virtualmachine or the like.

The terms “presence service” and “presence manager” may be usedinterchangeably throughout in the description. In particular a presenceserver being a virtual or physical entity providing a presence serviceis hosting a presence manager providing a management of the presenceservice.

According to a preferred embodiment for performing the steps a) and b)described above, a rule on the forwarding element is installed toidentify packets of said network entity destined for the presenceservice and a drop action for said packets is performed when packetsmatch said rule. This enables in an efficient way to perform steps a)and b). By installing said rule on the forwarding element packets forthe presence service can be easily identified by an edge forwardingelement, i.e. a forwarding element to which a network entity is directlyconnected.

According to a further preferred embodiment a network entity issubscribed by sending a request to the presence service comprisingidentity information of said network entity and matching information tosaid presence service. This allows an efficient subscription of thenetwork entity, so that the presence service as well as the edgeforwarding element can easily identify packets from the subscribednetwork entity.

According to a further preferred embodiment the request compriseskeepalive information, preferably a keepalive period indicating thefrequency at which said entity provides keepalive messages. Thisprovides the presence service information of the frequency, in which asubscribed network entity will send keepalive messages. Thus, thepresent service knows which type of keepalive messages is provided and,for example at which frequency, enabling an easy determination when thesubscribed network entity may be considered as “absent” or “offline”.

According to a further preferred embodiment the matching information isgenerated by the presence service. The presence service can thengenerate the packet match information during the subscription operationand provide it to a user of the network entity. An advantage is thatwhen the matching information is generated by the presence service thepresence service can generate it according to the requirements of acorresponding forwarding element without having to translate or amendthe matching information provided by the network entity to be subscribedfor example.

According to a further preferred embodiment the matching informationincludes one or more values of header fields of a packet. This enables asimple but very efficient matching, i.e. identification of packetsdestined for the presence service of a corresponding subscribed networkentity.

According to a further preferred embodiment a subscription of a networkentity at the presence service expires after a certain expiration timeand/or upon explicit request. This enables a flexible handling ofsubscription. For example when the subscription has an expiration timethen after a certain time period and preferably without a reception ofkeepalive messages or status updates the corresponding network entitydevice is unsubscribed. Therefore an efficient resource management isprovided. Explicit cancellation provides that the network entity issubscribed as long as the presence service obtains no correspondingcancellation request enabling for example to maintain the descriptioneven if, for example a longer period of network problems occurs. Thus arepeated subscription and a discovery procedure for the still subscribednetwork entity is not needed.

According to a further preferred embodiment the subscription of anetwork entity to a presence service is initiated by a user of thenetwork entity, preferably by delegating the request for submission to adedicated entity. When the subscription is initiated by a user then theuser has full control about the use of the network entity to besubscribed and its applications, i.e. the user has to allow if apresence service should be used. By delegating the request forsubmission to a dedicated entity, the user has simply to send aninitiation message to a dedicated entity without having to know the fulldetails of the subscription and discovery process for example.

According to a further preferred embodiment for delegating the requestfor submission to a dedicated entity a signed delegation certificate isprovided for said dedicated entity. This enables for example that acentralized service or entity like a VoIP Service can providecertificates to local VoIP applications. The user of the VoIPapplication can then subscribe the VoIP application to a presenceservice without having to know the details of the presence servicesubscription routine enabling a simpler use of a presence service for auser. On the other hand the VoIP Service can control the type or thenumber of users to be allowed for using the VoIP application by thedistribution of these certificates.

According to a further preferred embodiment the presence service storesat least temporarily a current location of said subscribed networkentity, preferably specified indirectly, preferably by a forwardingelement ID of the forwarding element to which said network entity isconnected to. This enables the presence service to easily locatecorresponding network entities as well as local connection informationor the network entities connected to, for example an edge switch.

According to a further preferred embodiment information of monitoredentities is stored by the presence service. This allows the presenceservice to provide quickly to applications for example the status ofmonitored entities when such information is requested.

According to a further preferred embodiment said installed rule has anidle timeout, preferably related to an offline detection delay of thepresence service. This enables in an easy way that as long as thesubscribed network entity sends keepalive messages according to thespecified keepalive period the corresponding rule does not expire sinceit matches the keepalive messages and resets the idle timeout. Whenkeepalive messages are missing then the rule will be deleted because ofthe idle timeout. This enables an efficient usage of resources in theedge switch or edge forwarding element which is usually limited, so thatrules which are not required anymore are deleted.

According to a further preferred embodiment the presence service as wellas a controller of the forwarding elements is informed when the idletimeout has caused a deletion of said installed rule. This ensures thatthe involved edge switches are configured to notify the controller andin turn the presence service in case of for example a rule deletion.Therefore, if the rule is deleted a notification is generated and sentto the presence service. The presence service then uses thisnotification to update for example a flow table with entries ofmonitored network entities and then changes the corresponding networkentity status to offline.

According to a further preferred embodiment when the subscribed networkentity changes its location to a different forwarding element, thepresence service deletes the rule on the previous forwarding element andinstalls said rule on said different forwarding element, wherein saiddifferent forwarding element initiates an update discovery of saidnetwork entity connected to said different forwarding element. Thisenables in an efficient way to allow a network entity to change itslocation while remaining online. In such a case the network entity maysend the keepalive messages to a different edge port. The presenceservice may then use the information of the corresponding informationmessage of the edge forwarding element to update the location value in alocation table, to delete the corresponding rule from the old locationand to install it at the new location. Of course in this case the usermay not specify a location for the network entity during the entitysubscription operation.

FIG. 1 shows schematically a conventional software defined network. Inmore detail, FIG. 1 shows a plurality of switches (ES, S), which areconnected with each other to forward packets of network entities (NE).Each switch (ES, S) has a control interface that can be used toconfigure them. In FIG. 1 the forwarding elements in form switches (S,ES) are controlled by a logically centralized controller (C). Of courseit would be also possible that the network devices or switches (ES, S)are controlled by a plurality of controllers (C) with the controllers(C) being able to exchange messages among themselves.

The controller (C) is connected to each of the network devices (ES, S)of the network 1 using a control channel. Each network device (ES, S)here in form of switches (S, ES) has a set or number of ports that canbe connected to other switches (ES, S) or to end hosts in form ofnetwork entities (NE). A port connected to an end host (NE) is herecalled edge port (EP). A switch that has one or more edge ports (EP) ishere called edge switch (ES).

A switch (S, ES) further comprises a flow table (FT) as also shown inFIG. 1 for the second edge switch (ES) on the right side. The flow table(FT) contains a plurality of flow table entries. Such a flow table entryabbreviated with (FTE) comprises a match part m for identifying networkpackets to which the flow table entry (FTE) is applied, preferably byspecifying the values of the network packets header fields, an actionpart a specifying the action to be applied to the matched networkpackets, an idle timeout (idt) specifying the time after which the flowtable entry (FTE) is deleted if it did not match any network packet anda hard timeout ht which deletes the flow table entry (FTE) after acertain time period or at a certain time independently of any matchingof packets or not.

The set of flow table entries FTE in a switch's flow table (FT) defineshow the switch (S, ES) forwards or routes packets. An action a of a flowtable entry may for example include the sending of packets to thecontroller (C) through the control channel. The transfer of a networkpacket from the switch (ES, S) to the controller (C) is called“packet_in” throughout here in the description. These packet_in packetscomprise at least the following information: the network packet thatgenerated the packet_in information, the switch identifier from whichthe packet_in information is sent and the identifier of the switchesport (EP) on which the network packet was received. The switch (ES, S)can be configured to notify the controller (C) whenever a flow tableentry (FTE) gets deleted.

In particular the network of FIG. 1 may be a software defined network,for example based on OpenFlow technology providing the aforementionedproperties. Of course any other network providing the aforementionedproperties can preferably be used.

FIG. 2 shows multiple possibilities for deploying a presence service inform of a presence manager in a software defined network. In FIG. 2deployment possibilities for the presence manager (PM) providingpresence services in a software defined network are shown. In the leftupper half of FIG. 2 the presence manager (PM) present manager (PM) isdeployed within the controller (C) of the network whereas in the rightupper half of FIG. 2 the presence manager (PM) is implemented as anexternal entity which is connected to the controller (C). In the lowerleft corner of FIG. 2 a plurality of presence managers (PM) areconnected to an event dispatcher (ED) of the network controller (C), sothat a plurality of present managers PM1, PM2 can be used andcoordinated by an event dispatcher (ED) of the network controller (C).In the lower right corner of FIG. 2 a plurality of controllers C1, C2,C3, C4 is connected to a single presence manager (PM) providing thepresence service. Therefore a plurality of network controllers C1-C4 canbe used with a single presence manager (PM). Further the presencemanager (PM) could be enabled to communicate directly with theforwarding elements ES, S via a trusted and secure connection. If thepresence manager (PM) is directly implemented in the controller (C) anyaction required by the presence service on the network 1 is directlyexecuted whereas in case when the presence manager (PM) is implementedas an external entity a request for an action is forwarded to thenetwork controller (C).

FIG. 3 shows part of a system according to a first embodiment of thepresent invention. In FIG. 3 a flow table (FT) of a switch and furtherinternal state tables of a presence service (PS) of a presence manager(PM) are shown. In the upper half of FIG. 3 the flow table (FT) of aswitch S is shown comprising a match field m, an action field a, a hardtimeout ht field and an idle timeout (idt) field as mentioned above. Inthe lower part of FIG. 3 an entities location table (ELT) and amonitored entities table (MET) is shown: the monitored entities table(MET) is a database in which the presence manager (PM) or the presenceservice (PS) stores subscribed network entities (NE) with theircorresponding ID and their current presence status. Whenever a networkentity (NE) is subscribed to the presence service (PS), the presenceservice (PS) creates an entry in its monitored entities table (MET). Theentry contains the network entity ID and its presence status which isset to offline at the subscription stage.

Furthermore an entry in the entities location table (ELT) is added. Theentities location table (ELT) comprises the network entity ID, alongwith its packet match information, keepalive period and currentlocation, preferably specified by a combination of the switch ID andswitch port, i.e. edge switch and edge switch port. During thesubscription procedure the entry comprises the sole network entity IDand its packet match information.

Any user, for example in form of an application using the presenceservice (PS) can subscribe a network entity (NE) on the network 1 to bemonitored by the presence service (PS) provided by the presence manager(PM). A network entity (NE) in the network 1 may be any software orhardware system being able to send a network packet or being able todelegate to another network entity (NE) in a network packet sendingoperations.

In the following, a list of examples of network entities (virtual and/orphysical) to which the present invention is of course not limited isshown: a computer's network interface card, an operating system, such asGNU/Linux, an application running in an operating system, an embeddeddevice.

For subscribing a network entity (NE) a subscription request isgenerated by the user of the network entity (NE) and transmitted to thepresence service (PS) comprising a network entity identifier and acorresponding “packet match” information. Alternatively the “packetmatch” information can be generated by the presence service (PS) itselfproviding it to the user during the subscription procedure. The packetmatch information is preferably a combination of network packets headerfield values. Further the subscription request comprises keepaliveinformation in form of a keepalive period indicating the frequency atwhich a network entity will send keepalive messages. For example, such akeepalive message (KAP) is shown in FIG. 10 in detail.

Preferably a user is required to perform a subscription showing asubscription request for each network entity (NE) the user wants tomonitor. Alternatively the user can delegate it to a subscription entityto perform the subscription request itself. Between the user and thecorresponding subscription entity a secure communication forsubscription operations may be established.

When the network entity (NE) is subscribed to the presence service (PS)an expiration time may be assigned to the subscription or thesubscription can be permanent until explicit cancellation. Because ofthe subscription the presence service (PS) creates as already mentionedabove—an entry in its monitored entities table (MET) wherein the createdentry comprises the entity ID and its presence status which is set tooffline at this subscription stage. Further an entry to the entitieslocation table (ELT) is added. This entities location table (ELT)comprises the entity ID along with its packet match information,keepalive period and current location specified by the combination ofswitch ID and switch port of an edge switch (ES). During subscriptionthe entry comprises the sole entity ID and its packet match information.

FIG. 4 shows steps of a method according to a second embodiment of thepresent invention. In FIG. 4 a representation of possible states inwhich an entity managed by the presence service (PS) can be is shown. Atthe beginning a network entity (NE) is in the status un-subscribed US.When a user would like to have the network entity (NE) monitored heperforms as mentioned above an entity subscription process ESS. Uponsuccessful subscription, the network entity (NE) is then in the statesubscribed SS. After a successful subscription, the presence service(PS) performs two additional phases, here discovery D and listening L.Said phases D, L are performed for each subscribed network entity (NE)until such network entity (NE) stops to be monitored by the presenceservice (PS), for example until subscription of this network entity (NE)is cancelled.

The discovery phase (D) starts after the subscription phase has beenperformed. The presence service (PS) requires the subscribed networkentity (NE) to periodically send a network packet in form of a keepalivemessage with header values as specified during a subscription operationin the “packet match” information. In this discovery phase (D) thepresence service (PS) checks for the reception of a packet_in messagegenerated because of a keepalive message with such header values wasreceived by the corresponding edge forwarding element.

To enable a reception of packet_in messages the controller (C) mayinstall a flow table entry (FTE) with a corresponding action a in eachof the edge switches (ES). Alternatively during the subscription requestESS the presence service (PS) may ask for the location of the networkentity (NE) to be monitored so that packet_in message generation can beenabled on the sole edge port (EP) to which the subscribed networkentity (NE) is connected. When the packet_in message with the keepalivemessage is received, the presence service (PS) discovers (reference signEDC) the presence of the network entity (NE) at a given switch's edgeport (EP). The corresponding entry in the entities location table (ELT)is updated with this information and the status entry in the monitoredentities table (MET) is turned to online.

After the subscribed network entity is discovered EDC the listeningphase (L) starts. The presence service (PS) installs an absencedetection flow table entry (ADF) at the edge switch (ES) where thenetwork entity (NE) has been discovered. The match part of the absencedetection flow table entry (ADF) is set according to packet matchinformation stored in the entities location table (ELT) while its actionis just to drop the received packets destined for the presence manageror presence service respectively.

Furthermore the absence detection flow table entry (ADF) may comprise anidle timeout (idt) whose value is set according to the agreement reachedby the presence service (PS) and the user (U) during the entitiessubscription request (ESS), preferably wherein the timeout value had adirect relationship with the offline detection delay of the presenceservice (PS).

As long as the subscribed network entity (NE) sends keepalive messagesaccording to the specified keepalive period, the absence detection flowtable entry (ADF) does not expire since it matches the keepalivemessages and resets the idle timeout (idt). Here it is assumed that asubscribed network entity (NE) is offline when the keepalive messagesare not sent anymore. The absence detection flow table entry (ADF) whenthe keepalive messages are missing is deleted because of the idletimeout (idt). The presence service (PS) ensures that the involved edgeswitches (ES) are configured to notify the controller (C) and in turnthe presence service (PS) in case of a corresponding flow table entry(FTE) deletion. Hence the deletion of the absence detection flow tableentry (ADF) generates a notification being sent to the presence service(PS) and the presence service (PS) uses this notification to update itsmonitored entities table (MET) changing the entities status to offline.

When the network entity status is set to offline, the entities locationtable (ELT) is updated to delete the network entities location from thecorresponding entry. Moreover the presence service (PS) returns to thediscovery phase (D) which is depicted with reference sign EWO in FIG. 4and then the network entity (NE) is being un-subscribed EUS and afterbeing un-subscribed the network entity (NE) is in status un-subscribedUS again.

When a subscribed network entity (NE) is actively un-subscribed which isdepicted with reference sign EUS then the presence service (PS) does notreturn to the discovery phase (D) but directly un-subscribes thecorresponding network entity (NE) and then the network entity (NE) isagain in the status un-subscribed US.

Further the presence service (PS) may be enabled to allow a user and/ora third party to check a subscribed network entities presence statuseither by pulling or pushing procedures which may be implemented by thepresence service (PS).

It is also possible for subscribed network entity (NE) to change itslocation while remaining online, i.e. use the presence service whilechanging its location. In this case the subscribed network entity (NE)may send the keepalive messages to a different edge port (EP) of an edgeswitch (ES). The presence service (PS) would use the information of thepacket_in message generated by the edge switch (ES) to update thelocation value in the entities location table (ELT), to delete theabsence detection flow table entry (ADF) from the old location, i.e. theold edge switch (ES), and to install it at the new location, i.e. at anew edge switch (ES) assuming that in this case the user does notspecify a location for the subscribed network entity (NE) during theentities subscription procedure.

FIG. 5 shows part of steps of a method according to a third embodimentof the present invention. In FIG. 5 the events related to the discoveryphase (D) termination are shown. The packet_in message generationlocates the network entity (NE) within the network 1 and updates itspresence status to online. In a first step T1 the subscribed networkentity (NE1) sends a keepalive message (KAP) to the edge port (EP) ofthe edge switch (ES) to which the network entity (NE1) is directlyconnected. In turn in a second step T2 the edge switch (ES) sendspacket_in information including keepalive information to the controller(C). In a third step T3 the controller (C) performs an update of theentity status of network entity (NE) changing the presence status toonline in the monitored entity table MET.

FIG. 6 shows part of steps of a method according to a fourth embodimentof the present invention. In FIG. 6 a termination of the listening phase(L) and transition to the discovery phase (D) is shown. A keepalivemessage was lost and the corresponding absence detection flow tableentry (ADF) was then deleted. The edge switch (ES) notified thecontroller (C) and the presence service (PS). The presence status of thesubscribed network entity (NE1) was changed to offline.

In more detail in a first step V1 the controller (C) has configured theedge switch of the subscribed network entity (NE1) by sending a flowmodification message with keepalive headers for matching. Then in asecond step V2 the subscribed network entity (NE1) has sent keepalivemessages. In a third step V3 one or more keepalive messages were lostand then the edge switch (ES) sends a flow removed notification with thekeepalive header back to the controller (C) that the edge switch (ES)has—upon the lost keepalive messages—removed a corresponding flow tableentry (FTE). In a fifth step V5 the controller (C) updates the networkentity status for the subscribed network entity (NE)1 from online tooffline in its monitored entity table MET. After that the presenceservice (PS) returns to the discovery phase (D).

FIG. 7 shows a system according to a fifth embodiment of the presentinvention. In FIG. 7 a data center embodiment is shown in which avirtual switch (ESV) in a server machine (SM) works as an edge switch(ES) hosting the absence detection flow table entry (ADF).

The presence service (PS) is provided by the presence manager (PM) toapplications running in the data center 1. For instance an applicationis monitoring the presence of virtual machines (VM1, VM2) using thepresence service for example to perform fault detection.

The virtual machines (VM1, VM2) are the network entities to be monitoredby the presence service (PS) while the data center management system(DMS) is the user of the presence service (PS) provided by the presencemanager (PM). The operating systems of the virtual machines (VM1, VM2)include an additional service (KGS) sending keepalive messages asrequired by the presence service (PS).

The data management system (DMS) in the process of starting a newvirtual machine (VM1, VM2) performs a subscription request to thepresence service (PS) wherein the data center management system (DMS)provides an identifier for the virtual machines (VM1, VM2) internallyused as network entity identifier, a MAC address as packet matchinformation of the virtual machine (VM1, VM2), a keepalive period whichis specified to be for example one second and finally since the datacenter management system (DMS) is in charge of deciding the location ofa virtual machine (VM1, VM2), also the network location of the virtualmachine (VM1, VM2).

Of course the concept of a virtual edge switch (ESV) which is in FIG. 7hosted by the server machine (SM) can be generalized, i.e. an edgeswitch is a switch to which a network entity is directly connectedeither being a physical entity or a virtual entity. The same applies forthe network entity (NE) to be monitored by the presence service (PS). InFIG. 7 a virtual machine (VM1, VM2) with a keepalive generation service(KGS) is the network entity to be monitored by the presence service. Theterm “network entity” is to be understood either as a physical entityand/or as a virtual entity.

FIG. 8 shows presence service internal state and keepalive packetsgenerated according to a sixth embodiment of the present invention. InFIG. 8 presence service internal state tables, keepalive packets as wellas absence detection flow table entries (ADF) are shown for the systemof FIG. 7. In the upper half of FIG. 8 the presence service internalstate tables after the network entity subscription request for thevirtual machine (VM1, VM2) are shown. The entities location table (ELT)includes the virtual machine ID, packet match information with thekeepalive period of one second and a corresponding switch ID SW01 towhich the virtual machine corresponding to the virtual machine ID isconnected via switch port 2.

The monitored entities table (MET) includes the virtual machine ID andits status being offline at the end of the subscription process. In themiddle of FIG. 8 the keepalive packet (KAP) generated by the keepalivegeneration service (KGS) running in the virtual machines (VM1, VM2) ofthe server machine (SM) according to the embodiment of FIG. 7 is shown.The keepalive generation service (KGS) running in the virtual machinesoperating system generates a keepalive packet (KAP) and transmits itwithin a period of one second. The packet carries the L2_scr of thevirtual of the virtual machine (VM1, VM2) which works as network entityidentifier on the network. The L2_dst enables an identification in thesense that the network packet is a keepalive message destined to thepresence service (PS) of the presence manager (PM). The L2_dst servestherefore as service identifier, i.e. in this case it is the presenceservice ID.

In the lower part of FIG. 8 an absence detection flow table entry (ADF)is shown which is being installed into the edge virtual switch (ESV)located in the server machine (SM) in the embodiment of FIG. 7. The idletimeout (idt) is one second and the corresponding action is to drop anypacket and for the absence detection flow table entry (ADF) no hardtimeout ht is specified. Every network packet arriving at the edgeswitch (ESV) is then dropped when being destined for the presenceservice according to the presence service identifier.

FIG. 9 shows a system according to a seventh embodiment of the presentinvention. In FIG. 9 an embodiment in which the presence service (PS)provided by the presence manager (PM) is used for an implementation of aVoice-over-IP service in an operator's network. An aggregation network(AGGN) is again provided in a similar way as the networks in theprevious figures. Switches (ES, S) are used to forward packets withinthe network wherein each of the switches (S, ES) may be configured by acontroller (C) via a control channel. The presence manager (PM) isimplemented in the controller (C) of the aggregation network (AGGN).Further in FIG. 9 an access network (AN) is connected to an edge switch(ES) by an edge port (EP). The access network (AN) comprises part of theinternet IN and a DSLAM which is used as aggregation point for the “lastmile” from a laptop L on which a Voice-over-IP application (VA) isrunning and which is connected via home gateway (HG) to the DSLAM. Alsoa dedicated Voice-over-IP device (VD) is connected to the home gateway(HG) is connected to a Voice-over-IP service (VS).

The embodiment of FIG. 9 can enable an operator to provide a “buddylist” service to its customers or the operator can use this informationfor management and orchestration of its network. In the aggregationnetwork (AGGN) a network similar to a software defined network (SDN) isenabled. The aggregation network (AGGN) is as already mentionedabove—connected to the DSLAM which finally provides the “last mile”connection with a home gateway (HG) at the network subscriber's premise.The subscriber may use either ad-hoc Voice-over-IP devices (VD) providedby the operator or a Voice-over-IP application, for example running in asubscriber's laptop L. The Voice-over-IP device (VD) and theVoice-over-IP application (VA) are the network entities to be monitoredby the presence service (PS) provided by the presence manager (PM). Theuser of the presence service (PS) is in FIG. 9 the Voice-over-IP service(VS) as implemented by a network operator. The Voice-over-IP service(VS) delegates the subscription process to each one of the Voice-over-IPapplications. For instance the Voice-over-IP device (VD) and theVoice-over-IP application (VA) may perform the subscription process bythemselves. The delegation may happen for example using a signeddeclaration certificate to be provided by the Voice-over-IP service (VS)to each network entity (VA, VD).

A subscription request of the network entities (VA, VD) may be performedusing a UDP packet with destination specified to a well-known IP addressand/or port number that is provided by the network operator as presenceservice “end point”. This “end point” of the presence service (PS) doesnot require to be actually mapped to a real network node or entity sinceit only serves as identifier for the presence service (PS). Thesubscription request comprises preferably the following information: Ahash of the signed declaration certificate working as identityidentifier, packet match information based on the combination of publicsource IP address and source port number of the network entity to besubscribed and a keepalive period value of 10 seconds. Of course the 10seconds are only an example.

FIG. 10 shows presence service internal state tables and keepalivepackets generated according to a method according to an eighthembodiment of the present invention. In FIG. 10 the internal status ofthe presence service after the subscription request a keepalive packetgenerated and the absence detection flow table entry is shown. In theupper half of FIG. 10 the presence service internal state tables afterentity subscription request is shown for the embodiment of FIG. 9. Boththe Voice-over-IP application (VA) and the Voice-over-IP device (VD)will start sending keepalive packets (KAP) as soon as the subscriptionof them has been performed. This ensures that the presence service (PS)can correctly work even if the home gateway (HG) is performing networkaddress port translation (NAPT). The network address port translation(NAPT) as implemented usually in home gateways HG establishes a shortlived UDP binding between the internal IP address and port pair and theexternal IP address. When either the Voice-over-IP device (VD) or theVoice-over-IP application (VA) performs the subscription request, thepresence service (PS) can read the port number assigned by the networkaddress port translation (NAPT) at the home gateway (HG) from thereceived network packet carrying the subscription request.

Since the keepalive packets (KAP) will be sent right after thesubscription request and they will be forged to maintain the same IPaddresses and port numbers the network address port translation (NAPT)function will be applied using the same binding enabling the presenceservice (PS) at correctly recognizing them. Such a keepalive packet(KAP) is shown in the middle of FIG. 10. The generating keepalivepackets (KAP) by the Voice-over-IP application (VA) or by theVoice-over-IP device (VD) comprising the source IP address and portnumber which work as entity network identifier (ENID) on the network.The destination IP address and port number are instead the presenceservice identifier (PSID).

After a subscription has been performed the presence service (PS)installs the absence detection flow table entry (ADF) in thecorresponding edge switch (ES) connected to the DSLAM. The installedabsence detection flow table entry is shown at the bottom of FIG. 10.

The DSLAM is not required to maintain a fixed route going through theedge switch (ES) where the absence detection flow table entry (ADF) wasfirst installed. In fact for example in case of traffic engineering thatchanges the network path used by the DSLAM to connect the aggregationnetwork (AGGN) the presence service (PS) would recognize that as a(network) location change. As already described above, this wouldeventually generate a new packet_in message comprising the keepalivereceived at the new switch. The presence service (PS) would then use theinformation of the packet_in message to update the location value in theentity's location table (ELT) to delete the absence detection flow tableentry (ADF) from the old location and to install it at the new location.

Further a Voice-over-IP device (VD) or a Voice-over-IP application (VA)may always perform a new subscription request when there is a networkdisconnection detected, for example because the Voice-over-IP device(VD) or Voice-over-IP application (VA) were turned off and/or rebooted.This enables the presence service (PS) at detecting a network addressport translation (NAPT) mapping change and at updating the oldsubscription state.

The present invention enables a presence service (PS) to be implementeddirectly into a network exploiting preferably the software definednetwork paradigm. The presence service logic is preferably implementedin a control plane of the network in a logical component called presencemanager (PM). The presence manager (PM) can be deployed in one or as acombination of the following ways as shown in FIG. 2: as an extension tothe network controller logic, as an external entity that interacts withthe controller (C), as an external entity that interacts with severalcontrollers C1-C4 to provide to each network the presence service, it isalso possible that more than one presence managers (PM1, PM2) areconnected to a single controller (C). In this case the controller (C)will be provided with an event dispatcher (ED) logic that selects theright presence service (PS) that has the right to handle a given networkevent.

In other words the present invention preferably provides a system andmethod to monitor the presence and/or the absence of a network entity inwhich the presence detection function is distributed into the networkswitches. The network entity sends packets carrying meta-data that areused to identify such entity and only presence status change events arenotified by the switches. Further the presence service enables adetection of the presence and/or the absence of a network entity also incase the network entity changes its network location.

The presence service further enables a detection of the presence and/orabsence of a network entity also in case the entity is connected to thenetwork through a network address port translation (NAPT) function.Preferably a registration operation for the entity to be monitored isprovided requiring the specification of the meta-data to be used by thenetwork entity to forge the network packets which are used by thenetwork switches in order to detect the present status.

Embodiments of the present invention may further enable the use of flowcaches on network devices for implementing a distributed presenceservice.

Embodiments of the present invention may have, inter alia, the followingadvantages: the use of keepalive packets only at the very edge of thenetwork, optimizing the network-wide resources usage, substitution of asmuch as possible a poll system with a push one where only status changesare notified in contrast to conventional methods and systems in whichthe status information needs to be periodically refreshed.

Embodiments of the present invention may further exploit cheap resourcesat the network switches to maintain a distributed state for a highnumber of entities which in conventional systems would require aconsistent number of dedicated resources, for example several servers ata data center. The present invention enables a scaling with the numberof status changes instead of scaling with the number of messages sentreducing network traffic for the presence service

Even further scaling together with the optimized usage of networkresources enables an offload to the network of a service that otherwisewould be provided by applications at the edge of the network. Thenetwork, i.e. the network operator, can then consolidate the service forseveral customers.

While the invention has been illustrated and described in detail in thedrawings and foregoing description, such illustration and descriptionare to be considered illustrative or exemplary and not restrictive. Itwill be understood that changes and modifications may be made by thoseof ordinary skill within the scope of the following claims. Inparticular, the present invention covers further embodiments with anycombination of features from different embodiments described above andbelow.

The terms used in the claims should be construed to have the broadestreasonable interpretation consistent with the foregoing description. Forexample, the use of the article “a” or “the” in introducing an elementshould not be interpreted as being exclusive of a plurality of elements.Likewise, the recitation of “or” should be interpreted as beinginclusive, such that the recitation of “A or B” is not exclusive of “Aand B,” unless it is clear from the context or the foregoing descriptionthat only one of A and B is intended. Further, the recitation of “atleast one of A, B and C” should be interpreted as one or more of a groupof elements consisting of A, B and C, and should not be interpreted asrequiring at least one of each of the listed elements A, B and C,regardless of whether A, B and C are related as categories or otherwise.Moreover, the recitation of “A, B and/or C” or “at least one of A, B orC” should be interpreted as including any singular entity from thelisted elements, e.g., A, any subset from the listed elements, e.g., Aand B, or the entire list of elements A, B and C.

1: A method for monitoring a status in a form of presence and/or absenceof a subscribed network entity in a network by a presence service,wherein the network is a software defined network comprising one or moreforwarding elements configurable for recognizing and applying one ormore actions on packets being forwarded by the forwarding elements andone or more network entities, wherein the one or more network entitiesare connectable to one or more of the forwarding elements, the methodcomprising: monitoring the status of the subscribed network entity whenthe subscribed network entity is discovered by the presence service,wherein the monitoring the status of the subscribed network entitycomprises: a) providing the presence service with a status update of thesubscribed network entity only when at least one of the one or moreforwarding elements, to which the subscribed network entity is directlyconnected, has detected a change in the presence status of thesubscribed network entity; and b) dropping packets of the subscribednetwork entity destined for the presence service. 2: The methodaccording to claim 1, wherein, for performing a) and b), a rule on oneof the one or more forwarding elements is installed to identify packetsof the subscribed network entity destined for the presence service, andwherein a drop action is performed when packets match the rule. 3: Themethod according to claim 1, wherein the subscribed network entitybecomes subscribed by sending a request to the presence servicecomprising identity information of the subscribed network entity andmatching information to the presence service. 4: The method according toclaim 3, wherein the request comprises keep-alive information includinga keepalive period indicating the frequency at which said entityprovides keepalive messages. 5: The method according to claim 3, whereinthe matching information is generated by the presence service. 6: Themethod according to claim 3, wherein the matching information includesone or more values of header fields of a packet. 7: The method accordingto claim 1, wherein a subscription of the subscribed network entity atthe presence service expires after a certain expiration time and/or uponexplicit cancellation. 8: The method according to claim 1, wherein thesubscription of the subscribed network entity to a presence service isinitiated by a user of the network entity by delegating the request forsubmission to a dedicated entity. 9: The method according to claim 1,wherein for delegating the request for submission to a dedicated entitya signed delegation certificate is provided for the dedicated entity.10: The method according to claim 1, wherein the presence service storesat least temporarily a current location of the subscribed networkentity. 11: The method according to claim 1, wherein information ofmonitored entities is stored by the presence service. 12: The methodaccording to claim 2, wherein the installed rule has an idle timeoutrelated to an offline detection delay of the presence service. 13: Themethod according to claim 12, wherein that the presence service and/or acontroller of the forwarding elements is informed when the idle timeouthas caused a deletion of the installed rule. 14: The method according toclaim 1, wherein, when the subscribed network entity changes itslocation to a different forwarding element, the presence service deletesthe rule on the previous forwarding element and installs the rule on thedifferent forwarding element, wherein the different forwarding elementinitiates an update discovery of said network entity connected to thedifferent forwarding element. 15: A presence service entity forproviding a presence service for monitoring a status in form of presenceand/or absence of a subscribed network entity in a network, wherein thenetwork is a software defined network comprising one or more forwardingelements configurable for recognizing and applying one or more actionson packets being forwarded by the forwarding elements and one or morenetwork entities, wherein the network entities are connectable to one ormore of the forwarding elements, the presence service entity beingconfigured to: provide monitoring the status of the subscribed networkentity when the subscribed network entity is discovered by the presenceservice, wherein the monitoring the status of the subscribed networkentity comprises: a) providing the presence service with a status updateof the subscribed network entity only when at least one of the one ormore forwarding elements, to which the subscribed network entity isdirectly connected, has detected a change in the presence status of thesubscribed network entity; and b) dropping packets of the subscribednetwork entity destined for the presence service. 16: A software-definednetwork with a presence service for monitoring a status in form ofpresence and/or absence of a subscribed network entity, thesoftware-defined network comprising: one or more forwarding elementsconfigurable for recognizing and applying one or more actions on packetsbeing forwarded by the forwarding elements; and one or more networkentities, wherein the network entities are connectable to the one ormore of the forwarding elements, wherein the presence service isconfigured to: provide monitoring the status of the subscribed networkentity when the subscribed network entity is discovered by the presenceservice, wherein the monitoring the status of the subscribed networkentity comprises: a) providing the presence service with a status updateof the subscribed network entity only when at least one of the one ormore forwarding elements, to which the subscribed network entity isdirectly connected, has detected a change in the presence status of thesubscribed network entity; and b) dropping packets of the subscribednetwork entity destined for the presence service.